hyperplane
Joined 13 years ago
Joined 13 years ago
I wonder what has happened to the Bulldozer design team at AMD at this point and whether or not they even still work there at all.
[1] http://www.openssl.org/docs/apps/ecparam.html
[2] https://github.com/polarssl/polarssl/commit/577e006c2fe4a361...
It would be cooler to see some guys get together and make a de facto standard, and then implement this type of control into extensions for FF/Chrome.
Kill the CPM model and your wish will come true. Unfortunately, advertisers often first ask "Well how many pageviews does your <site/app/whatever> have?" Most advertising metrics are still stuck 10 years behind where we are and where we're going.
Semantics, semantics, but rkhunter is intrusion detection, not prevention. I don't know what rkhunter would do to stop an intrusion, and fail2ban stopping a brute-force on your SSH login is hardly the likely intrusion vector for a server running this many services.
These tools still require a huge amount of systems administration work before it really counts as a "personal cloud". rkhunter looks for some basic rootkits but will not really protect you from emerging threats, other than to tell you you have a file integrity mismatch on a common file such as /usr/bin/login.
Since this is installing everything, it seems wise to add better host-based intrusion detection/file integrity checking across all services and configurations, via AIDE[1] or Samhain[2], which you could do with this type of automated setup. Both can then use the local MTA to alert you directly to your mail client if something is compromised, plus you gain the security of your configuration files for these services not having been tampered with.
What about running unattended-upgrades[3] for security patches to things like Apache et al? Given the adversaries expected here, I assume that we aren't worried about false packages, etc. as a risk.
[1] http://aide.sourceforge.net/
No. Subsistence living is entirely possible - there are millions of people doing just that somewhere in backwoods wherever, across a multitude of political systems and states, all over the world.
What you want as "subsistence living" is not its definition. What you're talking about is "how much labor cost it requires to maintain your current lifestyle in this current political system".
EDIT: I was late on this reply I guess.
As far as I am concerned, the primary job of a designer is communicating a message. If anything, designers should probably be given less slack over time for their personality flaws, because their whole job revolves around communication and empathy toward a user.
Why not reflect that same empathy inward toward the company? If your design team is the center of your empathy toward your users, your design team should equally be trying to lead positive communication efforts with engineers and PMs to find a common ground, build a common vocabulary, and understand everyone's stake in the game from the onset in a diplomatic and friendly fashion, especially so as the designer becomes senior. After all, what problem is more abstract than the meta-problem of intergroup communication?
I don't think posts like this help construct meaningful dialogue between departments and only serve to reinforce existing clique-oriented behavior. Interdepartmental/inter-role communication is "us vs. them" only if these types of attitudes are allowed to foster in the corporate culture.
It's a "user-friendly" feature that sacrifices some of Coinbase's own bottom line (and security) for the sake of those that want convenience over security. I wouldn't be scared unless this is enabled on your account. (In fact, from the usability end, it should require some serious hurdles to be enabled in the first place for that reason, to protect against unauthorized enabling.)
The sacrifice for Coinbase seems to be that the people that would enable this feature are accustomed to calling up Visa/MC, reporting a fraudulent transaction, and getting their money back + an affidavit in the mail, so Coinbase will have to be able to cover a fraudulent bottom line either out of their own finances or a good insurance policy.
Is this websec? appsec? Reverse engineering?